Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.zookeeper/zookeeper@3.6.1
purl pkg:maven/org.apache.zookeeper/zookeeper@3.6.1
Next non-vulnerable version 3.8.6
Latest non-vulnerable version 3.9.5
Risk score 4.1
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-7286-pgfv-vxvh
Aliases:
CVE-2023-44981
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the …
3.7.2
Vulnerable
GHSA-r978-9m6m-6gm6
Aliases:
CVE-2024-23944
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling Information disclosure in persistent watchers handling in Apache ZooKeeper due …
3.8.4
Vulnerable
3.9.2
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2018-8012
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through …
CVE-2017-5637
Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server …